Browse Database

Akismet Anti-spam: Spam Protection

Medium
Developer: Automattic Version: 5.7.2 Last scanned: 4 september 2026 View on WordPress.org ↗

No critical findings detected by this scanner does not mean "this plugin is safe." This report is based on static analysis and cannot guarantee that the plugin is free from vulnerabilities or malicious behaviour.

Overview

Security
Info
Permissions
Medium
External Access
Low
Data Handling
Not yet analyzed
Code Quality
Not yet analyzed
Activation Behaviour
Medium

3 things worth reviewing

  • Uses capability checks in 12 locations
  • Contacts 2 external hosts
  • Registers 6 REST API routes

Scanner 0.1.0 · Ruleset 0.1.0 · Package SHA-256: e76d9ad61b95fb36…

Permissions

  • moderate_comments — used in 5 locations
  • manage_options — used in 4 locations
  • edit_comment — used in 2 locations
  • edit_post — used in 1 location
🔒 Full details are available with a Developer or Agency plan.

File paths, line numbers, and raw evidence are part of the paid technical detail layer.

View plans

External Access

  • rest.akismet.com — unclassified
🔒 Full details are available with a Developer or Agency plan.

File paths, line numbers, and raw evidence are part of the paid technical detail layer.

View plans

REST API

Total routes
6
Public / Protected
0 / 6
Write-capable
1
  • /akismet/v1/key Protected
  • /akismet/v1/settings/ Protected
  • /akismet/v1/stats Protected
  • /akismet/v1/stats/(?P<interval>[\w+]) Protected
  • /akismet/v1/alert Protected
  • /akismet/v1/webhook Protected Write
🔒 Full details are available with a Developer or Agency plan.

File paths, line numbers, and raw evidence are part of the paid technical detail layer.

View plans

Activation Behaviour

  • Writes to the database (no)
  • Creates database tables (no)
  • Creates user accounts (no)
  • Creates roles (no)
  • Changes capabilities (no)
  • Creates credentials (e.g. Application Passwords) (no)
  • Contacts an external host (yes)
  • Schedules a background job (cron) (no)
  • Writes files (no)

Version Changes

Current version
5.7.2
Versions tracked
1
Latest Technical Risk
Medium
🔒 Full details are available with a Developer or Agency plan.

File paths, line numbers, and raw evidence are part of the paid technical detail layer.

View plans